A strong password generator per site
Changes in version 1.1.0 :
- new argon2 algorithm to choose from (scrypt is still here to stay compatible with previous version),
- 3 icons are generated from master password (to quickly see it’s correct without disclose it).
Changes in version 0.3.0 :
- `rounds` has been renamed to `difficulty` and is now 8192 instead of 1024,
- `key index` has been renamed to `user salt` and isn’t limited to a number anymore.
A good security practice is to use a different and strong passwords for each site you visit.
Memorizing that in your head is a pain.
The UniquePasswordBuilder addon allows you to construct strong and different passwords based from a single master password (the only you have to know).
When you’re on a login page, click on the lock icon, then type your master password. When finished, a password for that login page has been generated. You can then click on the icon on the right or press enter to paste it into clipboard, then just paste it in the login form. For each website, the generated password is different.
The master password is hashed a large number of time with the domain’s site generating an unique password for that site. Hashing algorithm is scrypt (which is memory resistant).
Note that your master password should be strong (more than 10 characters in lower and upper case, numbers and special characters). Using simple password makes brute force attack easier.
Other password tools (LastPass, KeyPass, etc) usually stores websites passwords into a encrypted database.
The drawback of that approach is that the database needs to be synced between all of your devices.
UniquePasswordBuilder doesn’t uses a central database because it recomputes your password each time.
For increased security, you can set a `user salt`, which make it even more resilient against rainbow table attacks.
That addon is free software and you can study the source code here : https://github.com/paulgreg/UniquePasswordBuilder
You’ll find further information on the project home page : https://paulgreg.me/UniquePasswordBuilder/